snd_bt_sco crash at startup

uname -a: Linux effenberg-mobile 2.6.24-12-generic #1 SMP Wed Mar 12 23:01:54 UTC 2008 i686 GNU/Linux
effenberg@effenberg-mobile:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=8.04
DISTRIB_CODENAME=hardy
DISTRIB_DESCRIPTION="Ubuntu hardy (development branch)"
effenberg@effenberg-mobile:~$

snd_bt_sco is crashing at every startup for me for the last two weeks. I could not track at each of Hardy's updates this started happening. The bug survived the recent Kernel updates. Here's what I see with dmesg:

[ 40.239738] snd-bt-sco revision 1.19 $
[ 40.239817] snd-bt-sco: snd-bt-scod thread starting
[ 40.263611] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000002
[ 40.263702] printing eip: dcb97745 *pde = 00000000
[ 40.263821] Oops: 0000 [#1] SMP
[ 40.263937] Modules linked in: snd_bt_sco snd_hwdep parport_pc lp parport tun pcmcia joydev wlan_scan_sta ath_rate_sample evdev snd_via82xx gameport snd_via82xx_modem snd_ac97_codec snd_mpu401_uart ac97_bus snd_pcm_oss snd_pcm psmouse pcspkr serio_raw snd_mixer_oss video output snd_seq_dummy snd_seq_midi snd_rawmidi snd_seq_oss snd_seq_midi_event snd_seq snd_timer snd_seq_device snd snd_page_alloc soundcore i2c_viapro i2c_core battery ac button yenta_socket ath_pci wlan rsrc_nonstatic pcmcia_core ath_hal(P) shpchp pci_hotplug via_agp agpgart iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack iptable_mangle iptable_filter ip_tables x_tables ext3 jbd mbcache sg sd_mod sr_mod cdrom via82cxxx ide_core usbhid hid pata_acpi via_rhine ehci_hcd sata_via uhci_hcd pata_via ata_generic mii usbcore libata scsi_mod thermal processor fan fuse vesafb fbcon tileblit font bitblit softcursor
[ 40.267358]
[ 40.267402] Pid: 6277, comm: modprobe Tainted: P (2.6.24-12-generic #1)
[ 40.267455] EIP: 0060:[<dcb97745>] EFLAGS: 00010246 CPU: 0
[ 40.267519] EIP is at snd_pcm_timer_init+0x25/0x170 [snd_pcm]
[ 40.267565] EAX: 00000002 EBX: d994be00 ECX: dab63dfc EDX: 00000000
[ 40.267612] ESI: d9a96180 EDI: d994b634 EBP: 00000018 ESP: dab63de4
[ 40.267659] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
[ 40.267705] Process modprobe (pid: 6277, ti=dab62000 task=d9982b40 task.ti=dab62000)
[ 40.267753] Stack: 00000000 00000001 da5fe800 00000000 da5fe800 00000000 00000003 00000000
[ 40.268125] d994be00 00000018 dcb0320c 00000000 d9a96180 d994b600 dcb8f67f dcba092c
[ 40.268496] d994b600 dab63e38 d994bc00 00000001 dcb985f4 436d6370 63304432 ffffff00
[ 40.268867] Call Trace:
[ 40.268958] [<dcb0320c>] snd_add_device_sysfs_file+0x3c/0x70 [snd]
[ 40.269058] [<dcb8f67f>] snd_pcm_dev_register+0xef/0x200 [snd_pcm]
[ 40.269155] [<dcb07e4d>] snd_device_register_all+0x2d/0x60 [snd]
[ 40.269249] [<dcb03a1e>] snd_card_register+0x1e/0x320 [snd]
[ 40.269342] [<dc8a02d7>] alsa_card_bt_sco_init+0x277/0x2be [snd_bt_sco]
[ 40.269432] [<c01516c6>] sys_init_module+0x126/0x19c0
[ 40.269539] [<c0138540>] sigprocmask+0x0/0x110
[ 40.269629] [<c01053c2>] sysenter_past_esp+0x6b/0xa9
[ 40.269720] =======================
[ 40.269764] Code: 5b c3 8d 74 26 00 56 89 c6 53 83 ec 30 8b 56 30 c7 44 24 1c 00 00 00 00 8d 4c 24 18 c7 44 24 18 03 00 00 00 8b 18 83 e2 01 8b 03 <8b> 00 89 44 24 20 8b 43 0c 89 44 24 24 8b 46 0c 01 c0 09 c2 8d
[ 40.272126] EIP: [<dcb97745>] snd_pcm_timer_init+0x25/0x170 [snd_pcm] SS:ESP 0068:dab63de4
[ 40.272262] ---[ end trace fb14b0fe53367498 ]---

The weird thing in my opinion is that it somehow gets loaded:

effenberg@effenberg-mobile:~$ ps ax | grep snd
 6304 ? S 0:00 [snd-bt-scod]
11943 pts/0 R+ 0:00 grep snd
effenberg@effenberg-mobile:~$ lsmod | grep snd_bt_sco
snd_bt_sco 17738 1
snd_hwdep 10500 1 snd_bt_sco
snd_pcm 78596 5 snd_bt_sco,snd_via82xx,snd_via82xx_modem,snd_ac97_codec,snd_pcm_oss
snd 56996 23 snd_rtctimer,snd_bt_sco,snd_hwdep,snd_via82xx,snd_via82xx_modem,snd_ac97_codec,snd_mpu401_uart,snd_pcm_oss,snd_pcm,snd_mixer_oss,snd_seq_dummy,snd_rawmidi,snd_seq_oss,snd_seq,snd_timer,snd_seq_device
snd_page_alloc 11400 4 snd_bt_sco,snd_via82xx,snd_via82xx_modem,snd_pcm
effenberg@effenberg-mobile:~$

However I can't rmmod it.
effenberg@effenberg-mobile:~$ sudo rmmod -f snd_bt_sco
ERROR: Removing 'snd_bt_sco': Device or resource busy

As you can see in this other bug report of mine (https://bugs.launchpad.net/ubuntu/+bug/195829) removing it was the only way I could launch Skype, otherwise it would crash. Now rmmod is impossible.

I really don't know what other info I could provide in other to help you debug this. Please tell me what you need.

Regards,
Effenberg